1.1 Introduction 1.1.1 Purpose 1.1.2 Scope To install anti-virus software on the Brevera Breast Biopsy system with CorLumina imaging technology system. This document applies to all CorLumina systems with version 1.0.x or higher software running on Windows 7 (64-bit). 1.1.3 Estimated Time Installation of anti-virus products takes approximately 30 minutes to complete including configuration. 1.1.4 Reference List Hologic has verified only the products and versions that are in the following list. These products and versions do not interfere with the operation of the system. Hologic does not recommend installing any other product or version. Hologic cannot guarantee the effectiveness of these products in the prevention of malicious software. This document provides instructions for the following products. Symantec Endpoint Protection 12.x McAfee Enterprise VirusScan 8.8.x Sophos Endpoint Security & Control 10 Trend Micro OfficeScan 11 NOTE The customer must provide these products. Load only the client program and only one anti-virus program per system. Refer to the appropriate section of the installation guide. 1.1.5 Definitions LiveUpdate A feature that allows servers and clients to retrieve updates from an internal server or Symantec s official LiveUpdate server. Managed The client system is configured to send virus alerts and retrieve virus updates from an internal parent Symantec server. Real-Time Real-time scanning of each file that is loaded in RAM. SmartScan A scanning technique that scans the header of each file to determine its true file extension and to identify possible malicious code. Unmanaged The clients do not connect to the network nor do they have a parent server with which they communicate. These clients must download their own virus definition updates. MAN-04561-001, Revision 001 Hologic Page 1 of 5
1.2 Customer Preparation Checklist Prior to installation, note the following: Hologic does not supply anti-virus software. It is the responsibility of the customer to procure the software and associated licenses. Customers who want to use the Symantec Antivirus Corporate Edition must provide their own Symantec Anti-virus Server within their networked environment. Only client software should be loaded on the system. The clients will retrieve updates from their existing Anti-virus Server should they choose to install the client software in a "managed" state. For customers who want their installations to interface with their existing Symantec server, select Managed setup. 1.3 Preinstallation Checklist Prior to the installation, review the following: Ensure that no existing anti-virus software is loaded on the workstation prior to installation. Ensure that the installer has the proper serial keys and associated licenses for the product to install. 1.4 Installing Symantec Endpoint Protection Client v12.x as Unmanaged Client 1. On the CorLumina system, log in with the local OS account that has admin privileges. 2. Install the software: a. Load the Symantec anti-virus setup program from a thumb drive or CD. b. Autoplay should open the menu. If it does not, browse to the D: drive and double-click Setup to start the installation process. c. When the window appears, click Install Symantec Endpoint Protection Client. d. A window appears. Click Next. e. Click I accept the terms in the license agreement, then click Next. f. Select Unmanaged client and proceed to the next window. g. Select Custom, then click Next. h. Do not install the following components: Network Threat Protection Application and Device Control i. Click the Network Threat Protection drop-down menu and select x. j. Click the Application Threat Protection and Device Control drop-down menu and select x. k. Click Next. MAN-04561-001, Revision 001 Hologic Page 2 of 5
l. Ensure the Enable Auto-Protect and Run LiveUpdate check boxes are selected, then click Next twice. m. Click Finish. n. The Symantec Endpoint Protection dashboard appears. Ensure that there is no warning about out-of-date definitions. If there is a warning, work with your local IT group to configure the system before clicking Fix, which requires an active Internet connection to download the definition files from Symantec. 3. Configure protection (balancing security with performance). a. Select the Change settings tab on the left side pane of the Symantec Endpoint Protection dashboard. b. Click Configure Settings next to the Antivirus and Antispyware Protection field. c. Select the File System Auto-Protect tab, then click the Selected check box under the File Types section. Click OK to close. d. Select the Change settings tab on the left side pane of the Symantec Endpoint Protection dashboard. e. Click Configure Settings next to the Centralized Exceptions field. f. Click Add > Security Risk Exceptions > Folder. g. For optimal performance, exclude the following directories and their subdirectories from scanning: 1.5 Installing McAfee Enterprise VirusScan v8.8.x 1. On the CorLumina system, log in with the local OS account that has admin privileges. 2. Install the software: a. Insert the McAfee media. b. Browse to the media and double-click setupvse.exe to start the installation process. The McAfee console appears. c. Click Next at the McAfee VirusScan Enterprise Setup screen. d. Select the appropriate licensing information, click I accept, then click OK. e. Select Typical, then click Next. f. Select Protection Level Standard, then click Next. g. Click Install. h. When the installation is complete, deselect Update Now and Run On-Demand Scan. i. Click Finish. j. If you are prompted to reboot, reboot the system. MAN-04561-001, Revision 001 Hologic Page 3 of 5
3. Once the system reboots, log in and perform the rest of the procedure with the same account you previously used to install the software. 4. Exclude the following directories from scanning: a. Double-click the McAfee shield in the system tray and select Properties. b. In the left pane, click All Processes, then the Exclusions tab. c. Add the following directory and subdirectories to exclusions: Note Do not forget to select the Also exclude subfolders check box when you add the directory to the exclusion. 1.6 Installing Sophos Endpoint Security and Control 10 Sophos is an IT-centric product that is geared toward an enterprise with IT support staff. Hologic assumes that the customer: has the infrastructure already running, has the personnel with expertise to deploy and manage the anti-virus product, and simply needs to know which files or directories on Hologic systems to exclude from scanning. It is recommended that only the anti-virus client is installed, and features such as firewall or application control are left uninstalled. Other features such as firewall or application control are not recommended, as they increase the risk of reduced productivity due to the high maintenance required to care for them properly. Install them at your own risk if you have the local personnel with the right skill set to configure and maintain them. For optimal system performance, ensure that the installed anti-virus software excludes the following directories and their subdirectories from scanning: Note If the C: drive letter(s) do not apply to your configuration, substitute the appropriate drive letter(s). MAN-04561-001, Revision 001 Hologic Page 4 of 5
1.7 Installing Trend Micro OfficeScan 11 Trend Micro OfficeScan anti-virus is an IT-centric product that is geared toward an organization with dedicated IT staff. Hologic assumes that the customer: has the infrastructure already running, has the personnel with expertise to deploy and manage the anti-virus product, and simply needs to know which files or directories on Hologic systems to exclude from scanning. For optimal performance, be sure Trend Micro OfficeScan excludes the following directories and subdirectories from scanning: MAN-04561-001, Revision 001 Hologic Page 5 of 5